Privacy Policy
Last updated: 2 July 2026
Controller: KUKRA s. r. o., IČO (Company ID) 57 563 462, DIČ (Tax ID) 2122819732, registered office at Nové nábrežie 15021/5, 058 01 Poprad, Slovakia, entered in the Obchodný register Okresného súdu Prešov (Commercial Register of the District Court Prešov), Section Sro, Insert No. 52303/P, e-mail: kukrapp@gmail.com, tel.: +421 910 995 747.
This policy explains what personal data we process when providing the KUKRA service (the “service”) and what rights you have under Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection.
1. What data we process
- User data (employees of construction companies): name, work e-mail, login credentials (the password is stored as a one-way salted hash (bcrypt), so we cannot read it back).
- Company data: name, IČO (Company ID), address, contact details, logo, price list.
- Data about the company’s clients contained in quotations: the end client’s name and e-mail, a description of the enquiry, and any uploaded documents or photographs.
- Technical data: cookies strictly necessary for signing in (see the separate cookie policy).
2. Purpose and legal basis
- Providing the service and managing the user account — performance of a contract (Article 6(1)(b) GDPR).
- Generating quotations and sending them to clients — performance of a contract and the legitimate interest of the controller and of the company (Article 6(1)(b) and (f) GDPR).
- Security and protection against misuse — legitimate interest (Article 6(1)(f) GDPR).
In relation to end-client data entered into the service by the construction company, the company acts as the controller and KUKRA s. r. o. as the processor, processing the data solely on the company’s instructions.
3. Processors and data transfers
We use the following processors to provide the service:
- Hetzner Online GmbH (Germany) — hosting of the application and the database. The data stays within the EU.
- Anthropic PBC (USA) — processing of documentation and generating quotation text using artificial intelligence.
- Resend (Plus Five Five, Inc.) (USA) — sending transactional e-mails.
- Umami — website traffic analytics; we run it on our own server in the EU, without cookies and without profiling.
- Meta Platforms Ireland Ltd. — the Meta Pixel measurement tag; it loads only after you consent to marketing cookies (see the Cookie Policy).
We have data processing agreements in place with these providers. We do not disclose data to third parties for marketing purposes.
Transfers outside the EEA: Anthropic and Resend are companies based in the USA, so using them involves transferring data outside the European Economic Area. The transfer is safeguarded by Standard Contractual Clauses approved by the European Commission under Article 46(2) GDPR, which form part of our agreements with these providers.
Your projects and price lists are not used to train models. The project documentation, price lists and margins you enter into the service are used solely to process your own job. We do not provide them for training artificial intelligence models, nor do we make them available to other customers.
We will provide the current list of processors on request; we inform customers by e-mail in advance of any material change. We will conclude a data processing agreement under Article 28 GDPR on request — write to kukrapp@gmail.com.
4. Retention periods
The specific periods by category of data:
- Account data and content entered into the service (quotations, price lists, documentation) — for the duration of the subscription and no more than 90 days after it ends; we then erase it.
- Accounting and tax documents — 10 years, as required by the Slovak Accounting Act.
- Enquiries from the contact form — 12 months after the enquiry has been handled.
- Operational logs — no more than 90 days.
Quotations and the related data can be deleted at any time directly in the application.
5. Your rights
You have the right of access to your data, to its rectification and erasure, to restriction of processing, to data portability, to object to processing, and to lodge a complaint with the supervisory authority (Úrad na ochranu osobných údajov SR — the Slovak Data Protection Authority). Please send requests to kukrapp@gmail.com.
6. Changes
We may update this policy. We will inform you of any material changes.
This English text is a translation provided for convenience. In the event of any discrepancy between the English and the Slovak wording, the Slovak version prevails.
← Back to homepage